Hide Forgot
Description of problem: Version-Release number of selected component (if applicable): selinux-policy-doc-3.7.19-143.el6.noarch selinux-policy-3.7.19-143.el6.noarch selinux-policy-mls-3.7.19-143.el6.noarch selinux-policy-minimum-3.7.19-143.el6.noarch selinux-policy-targeted-3.7.19-143.el6.noarch How reproducible: always Steps to Reproduce: # run_init service lvm2-lvmetad status Authenticating root. Password: lvmetad is stopped # run_init service lvm2-lvmetad start Authenticating root. Password: Starting LVM metadata daemon: [ OK ] Cannot proceed since lvmetad is not active. # run_init service lvm2-lvmetad status Authenticating root. Password: lvmetad (pid 8724) is running... # ps -efZ | grep lvmetad system_u:system_r:initrc_t:s0 root 8724 1 0 15:59 ? 00:00:00 lvmetad unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 root 8739 5940 0 15:59 pts/0 00:00:00 grep lvmetad # Actual results: * lvmetad runs as initrc_t Expected results: * lvmetad runs in its own SELinux domain
Looks somethin which should be just labeled with lvm_exec_t. Milos, could you test it $ chcon -t lvm_exec_t /sbin/lvmetad
It seems to run well with that label.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2012-0780.html